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L2 

L3 
L4 
L5 



L6 
L7 

L8 



L9 



L10 



((web or audio or video) near2 
conferenc$3) or (white near2 board)) 
and (((collaborative near2 updat$3) or 
updat$3 or modif$5) with 
(application$l or object$l) same 
((access near2 (right or previlleg$l or 
rule$l or condition$l)) or ACL) 

1 and (@ad<"20010415" or 
@rlad<"20040115") 

2 and 707/9, 10,100.ccls. 

2 and "707"/$.ccls. 

13 ((web or audio or video) near2 

conferenc$3) or (white near2 board)) 
and (((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3) with 
(application$l or document$l or 
object$l) same ((access near2 (right 
or previlleg$l or rule$l or 
condition$l)) or ACL) 

5 and "707"/$.ccls. 

12 5 and ("709"/$.ccls. or "718"/$.ccls. or 
"715"/$.ccls. or "345"/$.ccls. or 
"707"/$.ccls.) 

32 ((web or audio or video) near2 

conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
(((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3) with 
(application$l or document$l or 
object$l) same ((access near2 (right 
or previlleg$l or rule$l or 
condition$l)) or ACL) 

35 ((web or audio or video) near2 

conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
(((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3) with 
(application$l or document$l or 
object$l or ((shared near2 
resource$l) or resource$l)) same 
((access near2 (right or previlleg$l or 
rule$l or condition$l)) or ACL) 

27 9 and ("709"/$.ccls. or "718"/$.ccls. or 
"715"/$.ccls. or "345"/$.ccls. or 
"707"/$.ccls.) 
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10 and (@ad<"20010415" or 
@rlad<"20040115") 

11 and 715/513,741,753,758.ccls. 

((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
(((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3) near3 
(application$l or document$l or 
object$l or ((shared near2 
resource$l) or resource$l)) same 
((access near2 (right or previlleg$l or 
rule$l or condition$l)) or ACL) 

13 and (@ad<"20010415" or 
@rlad<"20040115") 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
((((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3 or 
delet$3) near3 (application$l or 
document$l or object$l or ((shared 
near2 resource$l) or resource$l)) 
same (access near2 (right or 
previlleg$l or rule$l or condition$l)) 
or ACL)) 

15 and (@ad<"20010415" or 
@rlad<"20040115") 

16 and ("709"/$.ccls. or "7187$.ccls. 
or "715"/$.ccls. or "345"/$.ccls. or 
"707"/$.ccls.) 

17 and "707"/$.ccls. 

18 and 707/9,10,100,201.ccls. 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same 
((((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3 or 
delet$3) near3 (application$l or 
document$l or object$l or ((shared 
near2 resource$l) or resource$l)) 
same (access near2 (right or 
previlleg$l or rule$l or condition$l)) 
or ACL)) 
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L24 



(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
((((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3 or 
delet$3) near3 (application$l or 
document$l or object$l or ((shared 
near2 resource$l) or resource$l)) 
same (access near2 (right or 
previlleg$l or rule$l or condition$l)) 
or ACL) same ((broadcast$3 or 
push$3) with (updat$3 or modif$7 or 
change$l))) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(vyhite near2 board)) and 
((((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3 or 
delet$3) near3 (application$l or 
document$l or object$l or ((shared 
near2 resource$l) or resource$l)) 
same (access near2 (right or 
previlleg$l or rule$l or condition$l)) 
or ACL) same ((broadcast$3 or push$3 
or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l))) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same ((access 
near2 (right or previlleg$l or rule$l or 
condition$l)) or ACL) same 
((broadcast$3 or push$3 or (broad 
near2 cast$3)) with (updat$3 or 
modif$7 or change$l)) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same ((access 
near2 (right or previlleg$l or rule$l or 
condition$l)) or ACL) same 
((broadcast$3 or push$3 or (broad 
near2 cast$3)) with (updat$3 or 
modif$7 or change$l)) 
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14178 



(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
((((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3 or 
delet$3) near3 (application$l or 
document$l or object$l or ((shared 
near2 resource$l) or resource$l)) 
same (access near2 (right or 
previlleg$l or rule$l or condition$l)) 
or ACL) same ((broadcast$3 or 
push$3) with (updat$3 or modif$7 or 
change$l))) 

25 and (@ad<"20040415" or 
@rlad<"20040115") 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and 
((((collaborative near2 updat$3) or 
updat$3 or modif$7 or chang$3 or 
delet$3) near3 (application$l or 
document$l or object$l or ((shared 
near2 resource$l) or resource$l)) 
same (access near2 (right or 
previlleg$l or rule$l or condition$l)) 
or ACL)) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same ((access 
near2 (right or previlleg$l or rule$l or 
condition$l)) or authenticat$5 or ACL) 
same ((broadcast$3 or push$3 or 
(broad near2 cast$3)) with (updat$3 
or modif$7 or change$l)) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same ((access 
near2 (right or previlleg$l or rule$l or 
permiss$5 or.condition$l)) or 
authenticat$5 or ACL) same 
((broadcast$3 or push$3 or (broad 
near2 cast$3)) with (updat$3 or 
modif$7 or change$l)) 
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L31 



L32 



L33 



L34 
L35 



51 



(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same ((access 
near2 (right or previlleg$l or rule$l or 
permiss$5 or condition$l)) or 
authenticat$5 or ("ACL" or "access 
control list")) same ((broadcast$3 or 
push$3 or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l)) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) same (((access 
near2 (right or previlleg$l or rule$l or 
permiss$5 or condition$l)) or 
authenticat$5 or ("ACL" or "access 
control list")) with ((broadcast$3 or 
push$3 or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l))) 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and (((access 
near2 (right or previlleg$l or rule$l or 
permiss$5 or condition$l)) or 
authenticat$5 or ("ACL" or "access 
control list")) with ((broadcast$3 or 
push$3 or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l))) 

33 and (@ad< "200401 15" or 
@rlad<"20040115") 

(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and (((access 
near2 (right or previlleg$l or rule$l or 
permiss$5 or condition$l)) or 
authenticat$5 or ("ACL" or "access 
control list")) with ((broadcast$3 or 
push$3 or forward$3 or (broad near2 
cast$3)) with (updat$3 or modif$7 or 
change$l))) 
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(((web or audio or video) near2 
conferenc$3) or chat! or chating or IM 
or (instance near2 messag$3) or 
(white near2 board)) and (((access 
near2 (right or previlleg$l or rule$l or 
permiss$5 or condition$l)) or 
authenticat$5 or ("ACL" or "access 
control list")) with ((broadcast$3 or 
multi-cast$3 or push$3 or forward$3 
or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l))) 

"52" and (@ad<"20040415" or 
@rlad<"20040115") 

37 and (@ad< "200404 15" or 
@rlad<"20040115") 

36 and (@ad<"20040415" or 
@rlad<"20040115") 

39 and 707/9, 10,100,201.ccls. 

39 and 715/513,741,753,758.ccls. 

39 and ("709"/$.ccls. or "718"/$.ccls.) 

39 and 709/201,203,217.ccls. 

39 and "715"/$.ccls. 

(collaborative nea2 updat$3) and 
(((access near2 (right or previlleg$l or 
rule$l or permiss$5 or condition$l)) 
or authenticat$5 or ("ACL" or "access 
control list")) with ((broadcast$3 or 
multi-cast$3 or push$3 or forward$3 
or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l))) 

(collaborative nea2 updat$3) same 
(((access near2 (right or previlleg$l or 
rule$l or permiss$5 or condition$l)) 
or authenticat$5 or ("ACL" or "access 
control list")) with ((broadcast$3 or 
multi-cast$3 or push$3 or forward$3 
or (broad near2 cast$3)) with 
(updat$3 or modif$7 or change$l))) 

46 and (@ad<"20040415" or 
@rlad<"20040115") 

47 and 707/9, 10,100,201.ccls. 

48 and 709/201,203,217.ccls. 

47 and 715/513,741,753,758.ccls. 
47 and 726/2. eels. 
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23 
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229 



(collaborative near2 updat$3) same 
(realtime or ((audio or video or voice 
or web or web-based) near2 
conferenc$3)) 

(collaborat$5 near2 updat$3) same 
(realtime or ((audio or video or voice 
or web or web-based) near2 
conferenc$3)) 

(collaborat$5 near2 updat$3) and 
(realtime or ((audio or video or voice 
or web or web-based) near2 
conferenc$3)) 

(collaborat$5 near2 updat$3) and 
(realtime or (white near2 board$3) or 
((audio or video or voice or web or 
web-based) near2 conferenc$3)) 

55 and (@ad<"20040415" or 
@rlad<"20040115") 

(collaborat$5 near2 updat$3) and 
(realtime or (white near2 board$3) or 
((audio or video or voice or web or 
web-based) near2 conferenc$3)) same 
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Requirements for scalable access control and security management architectures 

Angelos D. Keromytis, Jonathan M. Smith ; 

May 2007 ACM Transactions on Internet Technology (TOIT), volume i issue 2 - 

Publisher: ACM Press ' \ \ 

Full text available: Q p df(365.56 KB) Additional Information: full citation, abstract, referen ce s, index term s ; 

Maximizing local autonomy by delegating functionality to end nodes when possifefe*fthej 
end-to-end design principle) has led to a scalable Internet. Scalability and the capacity for 
distributed control have unfortunately not extended well to resource access-control; ; | 
policies and mechanisms. Yet management of security is becoming an increasingly U- i 
challenging problem in no small part due to scaling up of measures such as ngrrj^e.^bf j 
users, protocols, applications, network elements, topological constr ... * --Mi"-*** 

Keywords: Large-scale systems, access control, authorization, credentials, dgl|| ^ j bn , ' 
distributed systems, security policy, trust management 
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Improving the granularity o f a c c e ss control for W i nd ows 2000 Sl*^" 
Michael M. Swift, Anne Hopkins, Peter Brundrett, Cliff Van Dyke, Praerit Garg, Shannoh* 
Chan, Mario Goertzel, Gregory Jensenworth " "t!*!!^" 

November 2002 ACM Transactions on Information and System Security (TISSEC), 

Volume 5 Issue 4 * 
Publisher: ACM Press 



Full text available: "g| pdf(447.78 KB) 
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This article presents the mechanisms in Windows 2000 that enable fine-grained^ST' ] 
centrally managed access control for both operating system components and applications. 
These features were added during the transition from Windows NT 4.0 to support- the I 
Active Directory, a new feature in Windows 2000, and to protect computersxQap^Cted. tjo. 
the Internet. While the access control mechanisms in Windows NT are suitable for file i 
systems and applications with simple requirements, they fall short of the ... 'I ll; I , j 
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Xinwen Zhang, Masayuki Nakae, Michael J. Covington, Ravi Sandhu 2Z"'Z 
June 2006 Proceedings of the eleventh ACM symposium on Access control models ! 
and technologies SACMAT "06 

Publisher: ACM Press - 
Full text available: ^ pd f(3 46.96 KB) Additional Information: f ull citatio n , abstract, r eferences Jndex^agfls... 

Collaborative systems such as Grids provide efficient and scalable access to distributed 
computing capabilities and enable seamless resource sharing between users andn' .* I 
platforms. This heterogeneous distribution of resources and the various modes bfj 
collaborations that exist between users, virtual organizations, and resource providers 
require scalable, flexible, and fine-grained access control to pro-tect both indivicj 
shared computing resources. In this paper we propose a usage control (UCO . B .'.4f ,i! f . 

I I i -. . ^^ll^^.^, 

Keywords: UCON, access control, authorization, collaborative computing, se^GJi|^ t>i . t 
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June 2003 Proceedings of the eighth ACM symposium on Access control models and 
technologies SACMAT '03 

Publisher: ACM Press IT 
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Full text available: ffLpdfiBJ 7.55 KB) 



Secure exchange of data over the web is becoming more and more important today.. By 
secure data exchange we mean that privacy and integrity are ensured when documents 
flow among different parties. A key issue in this scenario is how to ensure 6fiat*weT5r"' 
documents, when moving among different parties, are modified only according to-the 
stated access control policies. To cope with such an issue, in this paper we propose a 
distributed infrastructure that enable subjects to verify, upon receiving a doc J.rjjJ' [T 

Keywords: XML, distributed updates, integrity check protocols I 
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Srikumar Venugopal, Rajkumar Buyya, Kotagiri Ramamohanarao 
June 2006 ACM Computing Surveys (CSUR), volume 38 issue i 
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Full text available: S P.df(1 .70 MB) Additional Information: full citation, abstract, references, index teums s 

Data Grids have been adopted as the next generation platform by many sdentifjcf * ! \ 
communities that need to share, access, transport, process, and manage large data 
collections distributed worldwide. They combine high-end computing technologies with 
high-performance networking and wide-area storage management techniques. In this ; 
article, we discuss the key concepts behind Data Grids and compare them with other data 
sharing and distribution paradigms such as content delivery networks, peer-to-'peern 

Keywords: Grid computing, data-intensive applications, replica management, virtual ! 
organizations . J H j ...; f . h 
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We present a security architecture that enables system and application a ccess control \ 
requirements to be enforced on applications composed from downloaded executable;;; ; 
content. Downloaded executable content consists of messages downloaded from remote 
hosts that contain executables that run, upon receipt, on the downloading principal's ! 
machine. Unless restricted, this content can perform malicious actions, including ;;; < 
accessing its downloading principal's private data and sending messages on-tb-**^ 
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This paper presents the access control mechanisms in Windows 2000 that enabljepjiije- 
grained protection and centralized management. These mechanisms were a d d f e^;|tb ijiCj n g 
the transition from Windows NT 4.0 to support the Active Directory, a new feaSSnV- i 
Windows 2000. We first extended entries in acc'ess control lists to allow' VighTsj5^;{^y tjo 
just a portion of an object. The second extension allows centralized managemertlofr'object 
hierarchies by specifying more precisely how access control lis ... -44^ I 
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As a large quantity of information is presented in XML format on the Web, thereiar.e 
increasing demands for XML security. Until now, research on XML security has^J^w^i 
focused on the security of data communication using digital signatures -or-ene#y^i©*--~ 
technologies. As XML is also used for a data representation of data storage, X^I'l^gJJrity 
comes to involve not only communication security but also managerial security:^ 'rt!' 
Managerial security is guaranteed through access control, but existing XML a cP" * 
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The objective of this course is to provide an introduction to the issues that rnt^'fre^^ j 
considered when building high-fidelity 3D engaging shared virtual environments" ! 
principles of human perception guide important development of algorithms and [ [j^ J 
techniques in collaboration, graphical, auditory, and haptic rendering. We aim to show i 
how human perception is exploited to achieve realism in high fidelity environments .within 
the constraints of available finite computational resources. In this course w ... 
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Restricting network access of routing and packet forwarding to well-behaving nodes and 
denying access from misbehaving nodes are critical for the proper functioning of a mobile 
ad-hoc network where cooperation among all networking nodes is usually assumed.! 
However, the lack of a network infrastructure, the dynamics of the network topology an<d 
node membership, and the potential attacks from inside the network by malicious and/or 
noncooperative selfish nodes make the conventional network access co ... "J " ; ; 
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Electronic computers have evolved from exiguous experimental enterprises in ttiejl 1940s 
to prolific practical data processing systems in the 1980s. As we have come to re;ly;on j 
these systems to process and store data, we have also come to wonder about'theirtability 
to protect valuable data. ; ijftjj' 

Data security is the science and study of methods of protecting data in computeWsind 
communication systems from unauthorized disclosure ... :l ' " rk :""" '*35*!$t; 
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We consider several distributed collaborative key agreement and authentication protocols 
for dynamic peer groups. There are several important characteristics which make^this ! 
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problem different from traditional secure group communication. They are: 1) distributee 
nature in which there is no centralized key server; 2) collaborative nature in w^i!|tie 
group key is contributory (i.e., each group member will collaboratively cpntritaflfe |t^! ;pa rt 
to the global group key); and 3) dynamic nature in which ' : .-IEJiHH!*" 



Keywords: authentication, dynamic peer groups, group key agreement, rekeyi^^fsecure 
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The internet and related technologies have made multidomain collaborations a reality. ; 

Collaboration enables domains to effectively share resources; however it introdfeKsesn !»• 

several security and privacy challenges. Managing security in the absence of a central 
mediator is even more challenging. In this paper, we propose a distributed secure -» 
interoperability framework for mediator-free collaboration environments. We introduce the 
idea of secure access paths which enables domains to make localized acc ... ■ 1 111 * H1 

Keywords: access path, collaboration, decentralized secure interoperability, p^tnlSj!.. 
discovery, role based access control «m44h4^ 
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Current approaches to access control on the Web servers do not scale to enterprise^wide 
systems because they are mostly based on individual user identities. Hence we-wene- -I 
motivated by the need to manage and enforce the strong and efficient RBAC acc£ss7 J" 
control technology in large-scale Web environments. To satisfy this requirement, we - » 
identify two different architectures for RBAC on the Web, called user-pull and server-pul!l. 
To demonstrate feasibility, we im ... 
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The usability of access control mechanisms in modern distributed systems has Se|^!T 
widely criticized but little studied. In this paper, we carefully examine one such wMfely 
deployed access control mechanism, the one embedded in the WebDAV standardy from 
the point-of-view of an end-user trying to decide how to grant or deny access to some 
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resource to a third party. This analysis points to problems with the conceptual. u$$tijljty 
the system. Significant effort is required on the part of the ... j j jj J-*" 
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